Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Error: Fatal: unable to access 'https://github.com/xxx.git/': schannel: The revocation function was unable to check revocation for the certificate.

See original GitHub issue

Why am i getting this?

Fatal: unable to access 'https://github.com/xxx.git/': schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate.

Issue Analytics

State:
Created 6 years ago
Reactions:15
Comments:14 (2 by maintainers)

Top GitHub Comments

63reactions

shiftkeycommented, Jan 31, 2018

@RacheLev the issues you are encountering occurs when using Git on a network that blocks access to the revocation checks when verifying a SSL/TLS connection is secure.

I’m working on getting a fix into Git for Windows here: https://github.com/git-for-windows/git/pull/1450 and once that is fixed we’re tracking making this experience more friendly in #3326 to help with applying that fix. Please follow along with that issue for tracking the proper resolution.

To workaround this in the meantime, you can revert to the old OpenSSL behaviour:

$ git config --global http.sslBackend "openssl"
$ git config --global http.sslCAInfo [path to .pem file]

OpenSSL requires it’s own certificate file to use for validation, and this PEM file distributed by the cURL team should do the trick.

8reactions

RacheLevcommented, Jan 31, 2018

Thank you! Fixed it. Not getting the error anymore, but for some reason its not letting me click ‘commit to master’. Why is that? Thank you! בתאריך 31 בינו׳ 2018 4:06 לפנה״צ,‏ “Brendan Forster” < notifications@github.com> כתב:

@RacheLev https://github.com/rachelev the issues you are encountering occurs when using Git on a network that blocks access to the revocation checks when verifying a SSL/TLS connection is secure.

I’m working on getting a fix into Git for Windows here: git-for-windows/git#1450 https://github.com/git-for-windows/git/pull/1450 and once that is fixed we’re tracking making this experience more friendly in #3326 https://github.com/desktop/desktop/issues/3326 to help with applying that fix. Please follow along with that issue for tracking the proper resolution.

To workaround this in the meantime, you can revert to the old OpenSSL behaviour:

$ git config --global http.sslBackend “openssl” $ git config --global http.sslCAInfo [path to .pem file]

OpenSSL requires it’s own certificate file to use for validation, and this PEM file https://curl.haxx.se/docs/caextract.html distributed by the cURL team should do the trick.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/desktop/desktop/issues/3889#issuecomment-361799691, or mute the thread https://github.com/notifications/unsubscribe-auth/AgCfA7W8XAE3dE9fYRgO93Li3FN5NFXcks5tP8qLgaJpZM4RzPrb .